Port Suspended vs User Request(Requested by the user)

[Natsu]

Hi, Im having trouble with 802.1x auth, only on HPE5130 switches, I have others like 5120, 4500 and 3600 and they are ok. Its quite random i think, and its not so often, but enough to take notice that something not right. So I found out that sometime users after shutting down computer and turning it on next day cant re-auth to 802.1x. Even when tehy restart PC several times, what You need to do is to shut the port on switch or unplug/plug cable. UAM states that users with that problem have 802.1x offline casue status "Port suspended". Normally its Request(Requested by the user) what i can see. When computer is shut down, its in this 10/half duplex mode, but its the same on other model switches.

Did anyone have this problem, how can I solve this?

[drk787]

Hi @Natsu 

Can you share the interface configuration where the PC is connected. We may have to run the debug dot1x commands when you have the issue to troublshoot further. Try the below commands on one of the interface for testing and simulate the issue if they are not already configured.

undo dot1x handshake
dot1x re-authenticate

Also if the switch is running older version, its recommended to upgrade to latest version which has some bugfixes related to dot1x.

[Natsu]

My config below, i will try your settings.

port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan XXX untagged
port hybrid pvid vlan XXX
mac-vlan enable
broadcast-suppression pps 3000
stp edged-port
dot1x
undo dot1x handshake
dot1x mandatory-domain dot1x
dot1x max-user 1
undo dot1x multicast-trigger
dot1x unicast-trigger
dot1x guest-vlan XXX
dot1x auth-fail vlan XXX
mac-authentication
mac-authentication max-user 1
mac-authentication domain dot1x
mac-authentication timer auth-delay 1
mac-authentication guest-vlan XXX
mac-authentication parallel-with-dot1x

[Natsu]

Unfortunately suggested solutions did not work.

It keeps bugging me, in IMC that status

  Offline Cause Port Suspended

Any further ideas how to resolve this? Updating stations networking driver does not help.